JwtService

JwtService.cs

public class JwtService : IJwtService
{
	private readonly JwtSettings _settings;

	public JwtService(JwtSettings settings)
	{
		_settings = settings;
	}

	public object CreateJwtToken(User user)
	{
		var identity = GetClaimsIdentity(user);
		var handler = new JwtSecurityTokenHandler();
		var securityToken = handler.CreateToken(new SecurityTokenDescriptor
		{
			Subject = identity,
			Issuer = _settings.Issuer,
			Audience = _settings.Audience,
			IssuedAt = _settings.IssuedAt,
			NotBefore = _settings.NotBefore,
			Expires = _settings.Expiration,
			SigningCredentials = _settings.SigningCredentials
		});

		var jwtToken = handler.WriteToken(securityToken);

		return new
		{
			access_token = jwtToken,
			token_type = "bearer",
			expires_in = (int)_settings.ValidFor.TotalSeconds
		};
	}

	private static ClaimsIdentity GetClaimsIdentity(User user)
	{
		return new ClaimsIdentity
		(
			new GenericIdentity(user.Email),
			new[] {
				new Claim(JwtRegisteredClaimNames.Jti, Guid.NewGuid().ToString()),
				new Claim(JwtRegisteredClaimNames.Sub, user.Name)
			}
		);
	}
}